This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
File: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft (raw, json)
Hash identifier: /cbULmRlGoI4vgfovR2yjPZJBu/HhxGUbunlYyacRv4=
Subject key identifier: 53:18:A5:F8:39:A4:98:1E:78:F4:60:52:28:9E:2A:EB:3C:D8:4E:8C
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Certificate issuer: /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial: 725B2B2A04AA6AE875649B056232AB3134936182
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
Manifest number: 20
Signing time: Fri 05 Dec 2025 15:45:07 +0000
Manifest this update: Fri 05 Dec 2025 15:40:07 +0000
Manifest next update: Sat 06 Dec 2025 17:59:07 +0000
Files and hashes: 1: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: 1I9m2fUf9gQilzK/92MSjbd6eOb2/M7YEGAbTr8KTYs=)
2: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: hUbthIaEtw9HFHw6obRsM2wDiMQWDo4OVWiLGBu5clg=)
3: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: tH083W2mbuvxIYkpuiCHf0maj5FH8hVwfI3NmzxecOg=)
4: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: /0T78rqQobVja0DtJ8HTQAWJNYgm+gpT1gfJ9unfuSY=)
5: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: LKfai9OZTFCl04VmCLWnvJdSdPICsz5k6/PI4sSkmnA=)
6: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: Ju72G5NPWzwFHCe9aM3r7rJQ+Ry+URdIWNHRW2JyXz0=)
7: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl (hash: 95cdHgfaoWLaTM/dvV/MBpehdbOEZvRHi65oAlFoJxw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 17:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5b:2b:2a:04:aa:6a:e8:75:64:9b:05:62:32:ab:31:34:93:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Validity
Not Before: Dec 5 15:40:07 2025 GMT
Not After : Dec 6 17:59:07 2025 GMT
Subject: CN=5318A5F839A4981E78F46052289E2AEB3CD84E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:4a:ea:f7:d4:09:16:3a:53:07:bf:62:15:
48:f4:f7:2f:54:ad:b4:42:1c:ca:6e:a2:a4:0c:83:
be:a9:14:66:58:1e:a6:0f:52:85:fe:48:0a:ca:4b:
f4:bc:14:68:88:9d:d4:2c:84:66:6b:ca:0e:46:46:
e2:ae:74:ad:e6:33:b9:70:18:b5:ad:12:63:ab:5a:
37:ac:1f:0d:f6:13:44:be:38:df:85:ba:bc:50:af:
d3:87:1a:52:fc:04:2a:15:2b:b9:f9:0a:8b:63:8d:
b7:1b:78:a5:b1:35:27:95:1e:e4:7f:12:37:63:21:
e4:e8:7c:59:57:ca:9a:60:6b:b0:7c:cb:b8:fb:6b:
75:26:d0:c7:52:af:73:25:c1:81:0d:94:5e:65:46:
bf:73:61:b5:c2:1a:54:7b:8e:ed:f1:f6:61:26:1d:
a3:06:9b:34:8d:92:13:c3:dd:bf:f3:e4:ba:d7:85:
b4:fb:53:d8:a1:e2:ca:05:2e:19:8f:f5:d4:b0:12:
9a:79:6a:e7:72:d3:ef:66:14:d9:29:b6:24:15:71:
7a:2d:83:24:e9:85:7d:e6:35:ed:50:ca:37:c3:fa:
df:49:86:82:d0:a0:3e:5c:aa:55:05:bc:10:e5:64:
dc:99:43:25:11:78:ca:ce:6a:cf:8d:59:51:49:d1:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:A5:F8:39:A4:98:1E:78:F4:60:52:28:9E:2A:EB:3C:D8:4E:8C
X509v3 Authority Key Identifier:
keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4c:99:15:e1:1e:14:b0:a5:54:5f:23:c5:52:b0:fd:10:e0:
06:da:f0:43:bb:e4:30:a7:89:fa:93:63:0c:fb:c0:89:11:03:
5f:ac:31:70:ab:39:84:4b:0a:0f:c7:61:11:19:ac:69:d5:bb:
22:82:64:80:f4:a3:fc:84:4c:8e:37:33:97:ed:49:45:fa:e4:
38:b2:26:aa:df:5f:f5:f4:df:31:ab:93:b8:14:d9:68:43:12:
7f:fd:29:8e:a4:f7:d0:8b:e1:ca:10:4b:91:16:fb:f1:1f:67:
59:fd:57:50:16:70:8c:e5:b8:de:41:b9:97:a1:4d:1f:6e:13:
fb:84:04:88:2b:6d:64:f4:ea:22:6a:8e:c7:f4:64:06:ea:b7:
9b:f4:f2:85:cc:fc:95:5e:63:53:47:f4:e1:51:74:d6:2d:d4:
2a:3e:69:f0:2a:b0:75:36:4b:88:59:eb:c6:72:24:13:6e:29:
6c:fd:49:bd:0a:ee:ef:bd:e2:db:0f:d2:3e:fa:dc:e2:6f:68:
d9:0d:b8:ae:89:a2:27:85:b7:07:c0:1c:12:fa:45:50:b7:6f:
e0:90:fa:39:b7:c0:7c:24:e6:50:1f:90:a4:3d:d1:32:60:29:
1c:bc:aa:51:ea:3f:e5:37:50:c0:33:22:68:ee:97:b7:cb:ca:
14:af:5e:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUclsrKgSqauh1ZJsFYjKrMTSTYYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0QzhDQTNGREE4QkYzMDY5NDlGODk3OEY2OTA0MUZF
NTVCQTk5NDAeFw0yNTEyMDUxNTQwMDdaFw0yNTEyMDYxNzU5MDdaMDMxMTAvBgNV
BAMTKDUzMThBNUY4MzlBNDk4MUU3OEY0NjA1MjI4OUUyQUVCM0NEODRFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5Erq99QJFjpTB79iFUj09y9U
rbRCHMpuoqQMg76pFGZYHqYPUoX+SArKS/S8FGiIndQshGZryg5GRuKudK3mM7lw
GLWtEmOrWjesHw32E0S+ON+FurxQr9OHGlL8BCoVK7n5CotjjbcbeKWxNSeVHuR/
EjdjIeTofFlXyppga7B8y7j7a3Um0MdSr3MlwYENlF5lRr9zYbXCGlR7ju3x9mEm
HaMGmzSNkhPD3b/z5LrXhbT7U9ih4soFLhmP9dSwEpp5audy0+9mFNkptiQVcXot
gyTphX3mNe1QyjfD+t9JhoLQoD5cqlUFvBDlZNyZQyUReMrOas+NWVFJ0fc3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUxil+DmkmB549GBSKJ4q6zzYTowwHwYDVR0j
BBgwFoAUj0yMo/2ovzBpSfiXj2kEH+VbqZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4
eksvMC84RjRDOENBM0ZEQThCRjMwNjk0OUY4OTc4RjY5MDQxRkU1NUJBOTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNEM4Q0EzRkRBOEJGMzA2
OTQ5Rjg5NzhGNjkwNDFGRTU1QkE5OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4eksvMC84
RjRDOENBM0ZEQThCRjMwNjk0OUY4OTc4RjY5MDQxRkU1NUJBOTk0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnEyZFeEeFLClVF8jxVKw/RDgBtrwQ7vkMKeJ+pNjDPvAiREDX6wxcKs5hEsK
D8dhERmsadW7IoJkgPSj/IRMjjczl+1JRfrkOLImqt9f9fTfMauTuBTZaEMSf/0p
jqT30IvhyhBLkRb78R9nWf1XUBZwjOW43kG5l6FNH24T+4QEiCttZPTqImqOx/Rk
Buq3m/Tyhcz8lV5jU0f04VF01i3UKj5p8CqwdTZLiFnrxnIkE24pbP1JvQru773i
2w/SPvrc4m9o2Q24romiJ4W3B8AcEvpFULdv4JD6ObfAfCTmUB+QpD3RMmApHLyq
Ueo/5TdQwDMiaO6Xt8vKFK9eCg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:08:44 2025 by rpki-client